
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
In terms of diction, confluence refers to the merging of streams into a grand river. This embodies the objective of the confluence project. Consider any given ruby-based web application; after a certain point, all the assets, logic, stylesheets, etc. all become deeply intertwined with the given project. Modularity, portability, and agility are all out the window.
Some may argue this is a consequence of the "real world" where "scalability" necessarily implies that the code must be a clusterfuck. I humbly beg to differ. Thus confluence, the project you have at hand might be grand and momentus like the Amazon River, but, you should still build it from trickles, streams, and tributaries and, only in the end, do you confluent them together to form the raging rivers of life.
== Contributing to confluence
== Copyright
Copyright (c) 2013 Thomas Chen. See LICENSE.txt for further details.
FAQs
Unknown package
We found that confluence demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.